Double-agent cross-domain authentication system based on identification password and alliance chain

Abstract

The invention relates to a double-agent cross-domain authentication system based on an identification password and an alliance chain, and belongs to the technical field of Internet of Things information security. The system comprises an entity layer, an agent layer, a block chain layer and a physical storage layer, the entity layer comprises a plurality of entities and a KGC server; the KGC servercomprises a system initialization module, an entity key generation module, a BCAS server docking module and an AAS server docking module. The agent layer comprises an AAS server and a BCAS server; the AAS server comprises a BCAS server butt joint module, a KGC server butt joint module and an authentication agent module, and the authentication agent module comprises a message signature and signature verification module; the BCAS server comprises an intelligent contract module, a KGC server docking module and an AAS server docking module. According to the authentication system, mutual trust among management domains can be constructed, and the entity calculation overhead, the KGC server workload, the block chain transaction delay and the on-chain storage space in the authentication process are relieved.

Description

technical field [0001] The invention relates to a dual-agent cross-domain authentication system based on identification password and alliance chain, which is used for identity confirmation before an entity requests cross-domain entity services or accesses its resources, and belongs to the technical field of Internet of Things information security. Background technique [0002] Identity authentication is a very basic technology in IoT scenarios, and it usually exists as the underlying technology for privacy, security, trust, authorization, access control, etc., or as a submodule of most applications. Before an entity requests services and accesses network resources, it usually needs to be authenticated by the relevant identity authentication module, and the next step of network behavior can only be entered after the identity is confirmed. [0003] From the key types used in the identity authentication process, identity authentication technologies can be divided into two categ...

AI Technical Summary

Problems solved by technology

The identity authentication technology based on the public key can solve the scalability and flexibility problems faced by the symmetric key, but the identity authentication technology based on the digital certificate has the dependence on the public key infrastructure and the maintenance problem of the digital certificate, which makes it in Applications in the IoT space are limited

Images